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A CONDITIONAL ACCESS SYSTEM FOR BROADCAST DIGITAL 

TELEVISION 

Field of the Invention 

5 

This invention concerns a system that may be employed to 
provide conditional access to multiple broadcasters by a single consumer 
electronic device, such as a set-top box or a digital television. Each device is 
capable of receiving broadcast or transmitted digital streams from a variety of 
10 broadcast sources. 

Background of the Invention 

Today's NTSC televisions receive broadcast services from a 
15 variety of service providers (see Figure 1). Most television receivers 12 are 
capable of receiving unscrambled, information or programs directly from 
broadcast 22, satellite 26 and cable 24 networks. Traditionally, cable 
networks 24 providing scrambled or encrypted programs usually require a 
separate stand-alone device 16a (e.g., a set-top box) to descramble or decrypt 
20 the program. Similarly, digital satellite systems usually provide scrambled or 
encrypted programs that also require the use of a separate set-top box 16b. 
These set-top boxes may utilize a removable smart card 18a, 18b which 
contain the necessary decrypting algorithms and keys. Typically, a separate 
set-top box is required for each service provider. 
25 . — 

In the near future, broadcast digital television services may 
comprise 5 to 20 local channels, each of which may broadcast up to 10 
simultaneous programs, some of these programs being pay-per-view 
programs. A user may want a mix of services from several of the different 
30 service providers. For example, a user may want to purchase all of the 

Indiana University basketball games from local channel 4 and purchase all of 
the Notre Dame football games from channel 1 3 and purchase all of the 
Indianapolis Colts games from channel 8. If each of these. services were 
uniquely scrambled, the user would be burdened with purchasing multiple 
35 conditional access smart cards and swapping the cards as the user channel 
surfs. 
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Summary of the Invention 



The present invention resides, in part, in recognition of the 
described problem and, in part, in providing a solution to the problem. A 
5 single conditional access system that is capable of being used with a plurality 
of service providers without changing security modules is provided. Such a 
global conditional access system employs the concept of automatically 
debiting a user's account as a program is purchased versus logging all 
purchases and transmitting the log to the service provider for billing. To 
10 " achieve the desired flexibility, the system employs a global public key that is 
used by all of the service providers; this is the public key for every smart card. 
The corresponding private key is loaded into the smart card. It is well within 
the teachings of this application that more than one public/private key pair may 
be used to minimize the impact should security be breached. 
15 ■■■ ' :■ • : ' 

An event or program as described herein comprises one of the 
following: (1 ) audio/visual data such as a movie, weekly "television" show or a 
documentary; (2) textual data such as an electronic! magazine, paper, or 
weather news; (3) computer software; (4) binary data such as images or (5) 
20 HTML data (e.g., web pages). The service providers include any provider 
broadcasting events, for example, traditional broadcast television networks, 
cable networks, digital satellite networks, providers of electronic list of events, 
such as electronic program guide providers, and in certain cases internet 
service providers. 

25 

Such a system can be based on public key technology. One 
public key (number) is available to all sen/ice providers. This is the public key 
■ for every smart card. Each smart card has stored therein a secret private key 
that can decrypt messages encrypted by the public key. The service provider 
30 sends a CA entitlement message in the transmission stream encrypted by the 
public key that contains the name of the service provider, the name, time, and 
cost of the program and the key to decrypt the keys used to scramble the 
: ; * program. This message is decrypted by the smart card, and the appropriate 
information is stored in the smart card for each event purchased. The smart 
35 card has a certain amount of credit for purchases that has been enabled by 

the bank. As long as the limit is not exceeded, programs can be purchased by 
the viewer. At some appropriate preprogrammed time, the smart card forces a 
telephone call to the CA center. Using another set of public and private k'eys, 
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the CA center in cooperation with a bank receives billing information from the 
smart card and provides additional credit! The bank forwards the information 
and credits the appropriate service provider. 

5 Generally, the present inventipn defines a method for providing 

conditional access to a restricted broadcast or transmitted event. First 
encrypted access information associated with the broadcast event is received. 
Next the access information is, decrypted (or descrambled) and the cost of 
said broadcast event is verified to determine if it is less than a pre-stored cash 
10 reserve. Then the scrambled broadcast event is received from the service 
provider and it is descrambled. 

In accordance with one aspect of the present invention, the 
method for managing access to a restricted broadcast or transmitted event 

15 from one of a plurality of service providers comprises receiving a plurality of 
access information messages associated with the transmitted event. Each of 
the access information messages, being, scrambled using a different public key 
and comprising data corresponding to the cost of the transmitted event. Then, 
decrypting or descrambling one of the access information messages using 

20 the pre-stored private key associated with the service provider and verifying 

that the cost of the transmitted event is less than a pre-stored cash reserve. " - 
Finally, receiving the scrambled transmitted event from one of the service 
providers and descrambling the transmitted event using the descrambling key. 

25 In accordance with another aspect of the present invention the 

method for managing access to a restricted transmitted package of events 
comprises receiving digitally signed access information associated with the 
package of events via a direct channel and comprising data corresponding to 
the cost of the package of events. The signature pn the acess information is 

30 verified using a public key; the cost of the package is checked to ensure that it 
is less than a pre-stored cash reserve. When any one of the scrambled 
broadcast events belonging to the package is received from the service 
provider, its access information is decrypted to obtain the descrambling key. 

. 35 In accordance with yet another aspect of the present invention 

the method for managing access to a restricted transmitted event comprises 
transferring, from a bank, a cash reserve to a smart card; receiving, from a 
service provider an encrypted event key and the cost of the event; passing 
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the event key and purchase information to the smart card which is coupled to 
the digital video apparatus;' Next, the cost of the event is verified to determine 
that it is less than the stored cash reserve and the cost is deducted. The 
encrypted event key is decrypted and the scrambled event is 
5 received and then passed to the smart card where it is descrambled using the 
decrypted event key. Finally, the descrambled event is transferred to the 
digital video apparatus. 

These and other aspects of the invention will be explained with 
10 reference to a preferred embodiment of the invention shown in the 
accompanying Drawings. 

Brief Description of the Drawing 

15 Figure 1 is a block diagram illustrating a prior art configuration for 

interconnecting consumer electronic devices to a variety of service providers. 

Figure- 2 is a block-diagram illustrating one architecture for 
interfacing a common digital television to a plurality of terrestrial broadcasters; 
20 and 

Figure 3 is a block diagram of an exemplary implementation of a 
system for managing access to a device in accordance with the invention. 

25 Detailed Description of the Drawing 

The present invention provides a conditional access system, 
which may be utilized to obtain services from one of a plurality of sources. 
The conditional access system' when implemented within a digital television 
30 (DTV), or set-top box. or the like, permits a user to ; receive scrambled events 
from more than one sen/ice provider without swapping conditional access 
modules or smart cards. Alternately, the functionality of the smart card may 
be embedded within the DTV. Such a conditional access system may act as a 
toll bridge for access to! services thereby permitting a mechanism for the 
35 manufacturer of the DTV to collect fees based on use of its DTV. Similarly, 
this invention may be implemented within a set-top box (STB); for simplicity, 
the below description of the invention will be directed towards an 
implementation using a digital television and a smart card coupled thereto. 
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In Figure 2, system 30 depicts.the general .architecture for 
managing access to a digital television (DTV);4:0ay 40b. For simplicity the 
following description will be limited to a single DTV 40a. Similar element 
5 numbers define the same functional element. Smart Card (SC) 42a is 

inserted into or coupled to a smart card reader (not shown) of DTV 40a; bus 
45 interconnects DTV 40a and SC 42a thereby permitting the transfer of data 
therebetween. Such smart cards include, for example, ISO 7816 cards 
complying with National Renewable Security Standard (NRSS) Part A or 

10 PCMCIA cards complying with NRSS Part B. This inventive concept is riot 
limited to smart cards per se, but can be employed with conditional access 
modules. Conceptually, when such a smart card is coupled to a smart card 
reader, the functionality of the smart card may be considered to be a part of 
the functionality of the digital television thus removing the "boundaries" 

15 created.by the physical card body of. the smart card; ■ 

DTV 40a can receive services from a plurality of service 
providers' (SPs), such: as a broadcast television SPs 50 and 52, a cable 
television (not shown), and a satellite system (not shown). This invention finds 

20 benefit in terrestrial broadcasting. Certificate authority (CA) 75 is not directly 
connected to either the service providers or DTV 40a but issues digital 
certificates and public and private key pairs, which are used as, explained 
below. It is within the scope of this invention that the role of certificate 
authority 75 may be performed by the service providers in collaboration with 

25 the manufacturer of the DTV 40a. Billing center 70 is utilized to manage the 
user's accounts; updated information is provided as users make arrangements 
to purchase additional services and as these services are consumed or used. 

; ; Such a Conditional Access (CA) system designed for DTV 
30 broadcast technology is a transport-based system. This means that CA 
information for a particular broadcaster is transmitted only on its own RF 
channel. Each broadcaster is. responsible for its . own information and hence, 
there is no need for pre-established code; of conducts ta coordinate and/or 
synchronize. information among several broadcasters. Further, the CA system 
35 is based on E-cash.card loading. A user pre-loads his/her card with a certain 
amount of cash (from debit or credit accounts), and then uses the card to buy 
event packages, pay for monthly subscriptions, or buy specific programs in 
PPV mode. An event package may include, for example, all the games of 
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your favorite professional sports franchise or all the late Sunday movies on 
one or more virtual channels. 

The broadcast channel is used only to deliver the services and 
5 information for access to these services. All the remaining transactions are 
carried out using a return channel (i.e., a modem and a phone connection). 
Broadcasting of addressable messages is not needed. The broadcast 
services are protected using a common scrambling algorithm. The keys used 
in this process and event purchase information are encrypted with a global 
10 public key, and delivered to the user via the MPEG-2 stream. For event 

packages, package certificates are sent to the user, from the CA server 60a, 
via the return channel. As described below in more detail, certif icates are 
usually signed to ensure integrity of the certificate. That is, to ensure that the 
proper and unmodified certificate is received from the sender. Services are 
15 accessed through a renewable security module, i.e., and a smart card. 

Symmetric key cryptography involves the use of the same 
algorithm and key for both encryption and decryption. The foundation of 
public-key cryptography is the use of two related keys, one public and one 
private. The private key is a secret key and it is computationally unfeasible to 
deduce the private key from the public key, which is publicly available. 
Anyone with a public key can encrypt a message but only the person or device 
having the associated and predetermined private key can decrypt it. Similarly, 
a message can be encrypted by a private key and anyone with access to the 
public key can decrypt that message. Encrypting messages using a private 
key may be referred to as "signing" because anyone holding the. public key 
can verify that the message was sent by the party having. the private key. This 
may be thought of as being analogous to verifying a signature on a document. 

30 A digitally signed message is a message sent in the clear (i.e., 

unencrypted) having a signature attached thereto. The attached signature is 
produced by encrypting either the message itself or a digest of the message; a 
digest of the message is obtained by hashing the message. (Hashing involves 
subjecting the message to a one-way hashing algorithm, such as MD5 
.35 developed by Ron Rivest or SHA-1 developed by the. National Institute of 
Standards and Technology (NIST) and the National Security Agency (NSA) 
prior.to encrypting the message.) . Thus the recipient of the signed message 
cap verify the ; integrity (i.e., the source or origin)pf the message. (In 



20 



25 
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comparison, a public key certificate or digital certificate is a message, 
containing a public key sent in the clear having a signature attached thereto.) 
Signature verification involves checking the signature by decryption. 

5 As defined above, the five essential components of the CA 

system are the broadcaster, the CA vendor, the billing center (e.g., a bank), 
the end user, and the Certificate Authority. Figure 2 illustrates the overall 
system architecture, and identifies these five components with their 
communication links and data floWs. 

10 

The end user communicates with the CA vendor for downloading 
certificates through a point-to-point link such as a telephone line. The 
telephone line is used for automatic transactions and for voice connection 
when necessary. For automatic transactions, one enabling protocol is the 
15 Poiht-to-Poirit Protocol(PPP). Security is implemented at the application layer 
using private protocols. 

Communication between the CA vendor and the broadcaster 
may be established through a Local Area Network (LAN) or Wide Area 
20 Network (WAN). As before, security is embedded at the application level 
using privately-defined protocols running over existing internetworking 
protocols. The broadcast facility equipment needed to protect the broadcast 
streams can be an off-the-shelf product available from multiple CA vendors. 

25 Broadcasters are responsible for delivering; (1) the services, and 

(2) the entitlement messages. Such entitlement messages include access 
information (AIM) messages described below in more detail, (or alternatively 
entitlement control messages and entitlement management messages) that 
allow any user to buy those services. Communication between a broadcaster 

30 and the user therefore follows the point-to-multipoint model of broadcast 

technology. Broadcast AiMs do not contain addresses unique to each user or 
subscriber, which is typical with satellite or cable systems. 

If DTV 40a does not have a back chainnel connection needed to 
35 communicate with the CA server then loading cash to the card requires the 
user to either access a DTV unit with back-channel support or go to a 
particular location (bank, ATM, vendor's regional office) to have the card 
loaded. The CA operators act like the card holder's or users bank, while the 
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billing center acts like the merchant's bank. The card association could be the 
middleman between the CA operators and the broadcasters 1 banks that 
provides a transaction 1 settlement service. The fixed amount of "cash" loaded 
into the smart card or conditional access module can now be used to pay of 
5 services offered by a broadcaster. 

Whichever cash transfer mechanism is employed, the user 
requests a transfer of a specific amount of money to the CA card from a credit 
\ or debit account. After proper verification of the subject's identity and 
10 validation of user resources, the transaction is authorized, and the nominal 
amount of money is stored in the CA card. 

Once money is loaded into the card, a user can buy any number 
of services offered by broadcasters. Each purchase reduces the amount of 
available money in the card by the service price. The services offered by 
broadcasters can be classified, into two categories;rPPV events and packages. 
An event is a TV program with an allocated slot in a program guide and a 
package is simply a collection of events. Examples of packages are (1) all the 
NBA games in a given season, (2) the late Sunday movies on one or more 
virtual channels, (3) subscription to a particular virtual channel such as HBO. 
All events must have one or more of their audiovisual streams scrambled 
using a common symmetric key algorithm. Entitlement packages, which 
contain purchase information and descrambling keys, have to be encrypted 
with a common public-key algorithm. 

Upon purchase of an event, a record may be stored in the smart 
card which may be later transferred to the CA vendor. Once the stored 
purchase information is sent to the . CA . database, a-CA vendor can pay 
broadcasters, for the provided services,. In addition, each smart card has non- 
volatile memory to keep the following information. 

A 32-bit field represents the card serial number. A 128-bit BCD 
' field for the user (credit or debit) card number. A 1 0-byte field for the CA 
server phone number. A 10-byte field for an alternate CA server phone 
35 number. A 40-bit BCD field to store the amount of money available to the 
user. A field for a signature on the last Encash certificate. An 8-bit field to 
• ' store a threshold value to inform the user that the available E-cash is less than 
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a predetermined threshold or to initiate an; automatic call back to the CA 
server to add money. A 40-bit BCD field fp.rthei amount, of money downloaded 
to the card without user involvement whenE-cashis less than the threshold. 
The amount is determined by the user and :sent to the CA server during card 
5 activation. If this value is zero, automatic E-cash download will not be allowed. 
Two 768-bit fields for storing the private key for decrypting the AIMs and for 
storing the public key for verifying the signature on certificates. An 21 -byte 
field for storing the DES key for descrambling the broadcast services. Two 
96-byte fields for storing the key to replace the current private key and for the 
10 key to replace the current verification key. An 8-byte field for storing the 
symmetric DES key for secure communication with the CA server is also 
provided. It is within the scope of this invention that a scrambling algorithm 
may be a cipher other than DES. 

15 The card must store infonrnMion for P 

packages purchased by the uSerPlf the^ard ^enidT^ is full, the user will not 
be allowed to purchase additional events. 

Data exchange between the card and the host is based on a 
20 Well-defined common interface, i.e:; the National Renewiable Security 

Standard (NRSS), EIA-679 Part A or Part B. Since the phone line is a widely 
available physical link, the chosen protocol between the CA server and the 
host is the Point-to-Point protocol (PPP), RFC 1548, adopted as Standard 51 
with security provided within PPP datagrams. The technological innovation 
25 described herein does not preclude the use of alternative protocols different 
from PPP on the return chanheL • - • ' 

PPP is a protocol based on the HDLG standards of ISO, as 
adopted by the ITU-T for X.25 systems. It was developed by IETF to transport 
30 datagrams from multiple protocols over point-to-point links. The frame format 
is a 16 bit protocol field (defined in RFC 1700, "Assigned Numbers") , followed 
by an information field of variable length, and then followed by a padding field 
containing optional bytes added to adjust the frame length (if required by the 
receiving protocol), 

35 

For exchanging data between the card and the CA server, a new 
protocol is defined, having a protocol field value OxOOFF. The value of the 
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10 

padding field is always zero for this new protocol. The new protocol provides 
reliable transmission using acknowledgment (ACK) and negative 
acknowledgment (N ACK) messages which are inserted into the first byte of 
the Information field both messages utilizing an 8-bit uimsbf format. 

An ACK may be followed by information (piggyback 
acknowledgment) sent as a reply. If the receiving end detects a corrupted 
message, it responds with a NACK, and requests retransmission by the 
sender. 



Using the above protocol, the smart card initiates a callback to the 
CA server under any of the following conditions: 

1 . The card has been inserted into the DTV for the first time. 

2. The user has entered a request for an advanced package purchase 
15 using a displayed menu., 

3. The smart card memory is.full. 

4. The local time is within the interval [1am-6am] and there are new 
records to be sent. 

5. The card has received. a notification for a new private key or verification 
20 key. 

6. The smart card money is less than the specified threshold and 
automatic E-cash download is enabled. 

7. The user has entered a request for money using a displayed menu. 

8. The user has entered a request to cancel a package purchase. 
25 Depending on the condition, the card sends an initial alerting message to 

inform the CA server about the user and the purpose of the call. 

. When the user, inserts .the, card into the DTV for the first time, the 

information specific to the card is sent to \he CA server for registration. This 

30 information is encrypted with Kcallback. 

Card -> CA server: Alert message (with alert_type = 0x01) 

Card <r CA server: ACK message 

Card -> CA server: Card information message 

Card <r CA server: ACK message 



35 



An advanced purchase can be made using a displayed menu. In 
response to the user request, the CA server sends a package certificate that 
will be saved on the card. For example, 
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Card -> CA server: Alert message (with a!ert_type = 0x02) 

Card <r CA server: ACK message I Signed package certificate message 

Card -> CA seiver: ACK message 

5 

The Package Certificate format contains the following fields. 
An 8-bit field that indicates a package certificate message. Two values are 
possible, one for renewable package subscription and one for non-renewable 
package subscription. A 32-bit field that identifies the registration authority 

10 that assigns values to the provideMndex field. A 16-bit field that identifies the 
content provider. This unique number is registered with the registration 
authority identified by the formatjdentifier. A 16-bit field that identifies the 
transport stream where the event is being carried. A 1 6 bit field that indicates 
the package identifier. An 8-bit field for the title field. A variable length field for 

15 the title of the package using ASCII with Latin- 1 extensions. A 40-bit field 
which indicates the price of the package in BCD format. A 24-bit field which 
indicates the expiration date of the package; 

The PPV event purchase records are temporarily stored in the card 
20 until after the event is broadcast. They are sent to the CA server without user 
involvement and when either 

(i) the card memory is unable to store more records or 

(ii) the local time is in the interval [1am-6am] and there are new records to be 
sent. 

25 ■ 

All records are encrypted with Kcallback. 
(i) Smart card memory is full 

Card -> CA server: 5 Alert message (with alert_type = 0x03) 
30 Card <r CA server: ACK message 

Card -> CA server: A variable number of encrypted PPV event purchase 

records ; ; 

Card <r CA server. ACK message - 

35 (ii) The local time is within the inten/al {1am-6am] and there. are new records 
to be sent 

Card -> G A server: Alert message (with alert_type = 0x04) 
Card CA server: ACK message 
40 Card -> CA server: A variable number of encrypted PPV event purchase 

records 
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Card <r CA server: ACK message 

When the private key or verification key needs to be replaced, a 
notification is sent to the cards using the broadcast channel. Each user is 
5 then required to initiate a callback to receive the new key. 
Card -> CA server: Alert message (with alert_type = 0x05) 
Card <r CA server: ACK message I Key replacement message 
Card -> CA server: ACK message 

10 Money is added to the card when; 

1 . the smart card money is less than a specified threshold or 

2. the user enters a request for money using a displayed menu or 

3. the card is taken to a remote location (if there is no local phone 
connection). 

15 In all cases, the entity providing the money verifies the credit or debit card 
information, generates an E-cash Certificate (ECC), and sends it to the card. 
The ECC message format is '"ah 8-bit field for the message type and 40-bit 
field to hold the BCD Value of the amount of money to be added to the smart 
card, 

20 

1) Automatic E-cash download is enabled: 

Card -> CA server: Alert message (with alerMype = 0x06) 
Card <r CA server: ACK message 
Card -> CA server: Signature on E-cash 
25 Card CA server: ACK I Signed E-cash certificate message 
Card -> CA server: ACK message 

2) The E-cash Certificate contains the predefined, fixed amount of E-cash. 
Automatic E-cash download is disabled. The user proceeds as follows; 

30 Card -> CA server: Alert message (with alertjype = 0x07) 
Card <- CA server: ACK message 

Card -> CA server: Signature on E-cash I E-cash amount message 
Card <r CA server: ACK message I Signed E-cash certificate message 
Card -> CA server: ACK message 
35 * t _ * " ' / : . ' 

The user can cancel a purchase by using a menu displayed on 
the screen. The action taken by the card depends on the type of the 
purchase: 
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(i) Package purchase: A call is initiated to the CA server. 
Card -> CA server: Alert message (with alert Jype = 0x08) 
Card <- CA server: ACK message 

5 Card CA server: Canceled package purchase record 

Card <r CA server: ACK message I Signed E-cash certificate message 
Card CA server: ACK message 

(ii) PPV event purchase: If the deadline for canceling the event has not been 
10 reached, the chosen record is deleted entirely. 

The AIMs are carried as private data in the adaptation field of 
the Transport Stream packets carrying video data. These AIMs could also be 
carried in the Transport Stream with different PIDs using the tools and 
15 functions available for ECM transmission in MPEG-2. The 

adaptation Jield^control bits shall be 'lO' (Adaptation field only, no payload) or 
*1 V (adaptation field followed by payload). The maximum cycle time for AIM 
messages with the same AIMJd shall be 500 ms. 

20 The bit-stream syntax for the Access Information Message 

contains the 1 following fields. A unique 8-bit identifier of this access 
information message. The AIMJd field is the second byte in the private data 
section of the adaptation field. The first byte is allocated for identifying the 
public key used in protecting the AIM (if multiple public keys are used in a 
25 given DMA). An 8-bit field specifying the number of bytes in the AIM 

immediately following the AIMJength field. A 32-bit field that identifies the 
registration authority that assigns values to the providerjndex field. A 16-bit 
field that identifies the content provider. This unique number is registered with 
the registration authority identified by the formatjdentifier. A 24-bit field that 
30 identifies a particular TV program or event. Assigned by the content provider 
identified by providerjndex, it identifies uniquely all those programs registered 
in the content provider data base. A 1 6-bit field that identifies the Transport 
Stream where the event is being carried. A 16-bit field that identifies uniquely 
the particular sen/ice where the event is being transmitted. A 14-bit field that 
35 identifies uniquely a particular event within a given service of this Transport 
Stream. Whiie program__eventJd is a value that identifies an event for a 
content provider, eventjd is the program guide index of an event. A 
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broadcaster who acts simultaneously as a content provider may want to have 
both numbers equal, but this may not be valid otherwise. A 32-bit field 
indicating the event start time. A 20-bit field indicating the length of the event 
measured in seconds; A 10-byte field for storing the first 10 characters of the 
5 English title for the event that this message describes. If the actual title has 
less than 10 characters, then the title segment must be padded with ESC 
characters before including it in this field. A 5-byte BCD field indicating the 
cost of the event. A 1 6-bit field that indicates the packages to which this event 
belongs. The most-significant bit corresponds to the first package while the 
10 least significant bit corresponds to the 1 6-th package. If the event belongs to 
the k-th package, then the Mh bit of this field shall be set to one. More than 
one bit can be set to one to show an event that belongs to multiple packages. 
A 64-bit field for the DES key (or a 168-bit field for the TDES key) necessary 
. : for de-scrambling the video and audio signals for the event under 
15, consideration. A 4Q-bit fiQld indicating that the user needs to obtain a new 
private key or verification key by calling the GA server. If flag is set to 1 , the 
key needs to be replaced until the indicated deadline. An 8-bit field for 
identifying the total length (in bytes} of the AIM descriptor list that follows. 

20 In one embodiment of the present invention, entitlement 

management messages (ECMs) may be used instead of AIMs. The format of 
the ECM is privately defined according to MPEG-2 and ATSC specifications. A 
particular format that may be used comprises an 8-bit table identification field, 
3 indicator bits, a 12-bit section length field, an 8-bit protocol version field, a 5 

25 bit version number field,. 2 section number fields, a public, key field, a transport 
stream identification field, major and minor channel number fields, 2 event 
identification fields, a stream PID and descriptors length fields, a cryption 
check field, a stuffing bytes field, and a 32-bit CRC field. 

30 The security of the system is based on standard and widely 

accepted public key and symmetric key algorithms. The algorithms chosen 
are RSA for public key encryption and TOES and/or DES for symmetric key 
scrambling. There is a global RSA public/private key pair, Kpub/Kpri, for the 
entire system.. The public key is. shared by all the broadcasters and the 

35 corresponding private key is placed in the tamper-proof NRSS-A based smart 
cards, distributed by the CA providers, to the consumers. This public key is 
used to protect the AIMs generated at the. head-end. 
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The AIMs, encrypted under the public key, carry the control 
words (CWs) which are symmetric DES keys;XOES, used in scrambling the 
audio/video content in the ECB mode. After decrypting the AIMs with its 
private key, the card obtains the DES keys and descrambles audio/video 
5 streams. At the head-end: Scrambling: E K des(AA/ stream), Encryption: 
EKpub(AIM). On the card: Decryption: DkptKEkpu^AIM)), Descrambling: 
D K des(E K des(A/V stream)). 

The security of the system can be improved in a number of 
10 ways. One feasible approach is to use multiple public keys at the head-end 
for encrypting the AIMs. Such use of multiple keys may find benefit in areas 
of overlapping markets, for example, the user can receive terrestrial digital 
broadcast from more than major market. . Another example would be if the 
receiver population in a given DMA is divided into distinct subsets and each 
15 subset is assigned a different private. key an attack on one private key would 
not compromise the system;^ - ■ : v~>j .-<>■ : ... 

For example, encryption at the head-end may involve four keys, 
EKpubi(AlM), E Kp ub2(AIM), E K pub3(AIM), E Kp ub4(AIM). Decryption on the card 

20 would then be based on one of the following four keys, Card type 1 : 
D K prii(E Kp ubi(AIM)) f Card type 2: D Kp ri2(E Kp ub2(AIM)), Card type 3: 
DKpri2(E K pub2(AIM)) t and Card type 4: D Kp ri4(EK P ub4(AIM)). The public key used 
in encrypting the AIM is identified using the identifier in the first byte of the 
adaptation field. This field indicates the public key used in encrypting the AIM. 

25 If the value is i, the active public key is Kpubi, 

■ The E-cash Certificates carry the amount of money to be added 
to the card. The Package Certificatels include the price of the package offered 
to the customer. Since both of the certificates carry sensitive data, there 
30 needs to be a signature mechanism to ensure the integrity of these messages. 
Therefore, all certificates are sent via a channel with a feedback path, for 
example, a back chanrie! using a MODEM. 

Although the Package Certificates are normally sent from the CA 
35 server, there may be different sources (e.g., ATMs or other special terminals) 
for downloading E-cash to the card. If each source signs with a unique private 
key, the DTV needs to keep multiple public keys. The present CA system 



BNSDOCID: <WO 00047 17A1 I > 



WO 00/04717 



PCTAJS99/16188 



16 

employs an ID-based authentication scheme to allow signature verification 
using only one public key. 

As mentioned earlier, to participate in the scrambling, encryption 
5 and signature protocols, the broadcasters, CA servers and the smart cards will 
need to store certain keys. The storage and use of all types of keys are 
summarized in Figure 3. 

Kpub is kept at the broadcaster site, and is used to encrypt the 
10 DES keys that are locally generated to scramble the A/V streams. The card 
has the corresponding Kpri for recovering the DES keys. 

Ksig is used to sign package and E-cash certificates. The 
signed certificates are verified with Kver stored on the card. In the ID-based 
15 scheme described in Section 8.2, Ksig is unique for each certificate provider 
(CA vendors, ATMs; etc.) but Kv/er is common- to' all certificate providers. 

Kcallback is shared between the card and the CA server, and is 
used to encrypt sensitive information exchanged. The information sent from 
20 the card to the CA server is payment card no, fixed E-cash and event 
purchase records. When needed, Kpri and Kver are replaced by the CA 
server. Kcallback may be unique for each card. Its replacement is only 
possible by sending a new card to the user. 

25 While the invention has been described in detail with respect to 

numerous embodiments thereof, it will be apparent that upon reading and 
understanding of the foregoing, numerous alterations to the described 
embodiment will occur to those skilled in the art and it is intended to include 
such alterations within the scope of the appended claims. For example, this 

30 invention may be utilized successfully with both digital terrestrial broadcast 
and transmitted satellite digital signals. 
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Claims 

1 . A method for managing access te a -restricted transmitted event, said 
method comprising: 

(a) receiving encrypted access information associated with said 
transmitted event, said access information comprising data 
corresponding to the cost of said transmitted event; 

(b) decrypting said access information; 

(c) verifying that the cost of said transmitted event is less than a 
pre-stored cash reserve; 

(d) receiving said transmitted event from said service provider, said 
transmitted, event :being scrambled; and 

(e) descrambling said transmitted event. 

2. The method of Claim 1 wherein said access information further 
comprises an event descrambling key and purchase information, said 
purchase information comprising channel identification data, event identity 
data, date and time stamp data, and billing data. 

3. The method of Claim 2 further comprising the step of transferring data 
associated with said purchased transmitted event ; to said service provider to 
update a user's account information. 

4. The method of Claim 3 wherein the steps of decrypting, verifying and 
descrambling are performed in a smart card, said encrypted access 
information being encrypted using a public key and being decrypted using a 
corresponding private key stored in said smart card. 
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5. The method of Claim 4 wherein said public key is shared by all 
broadcasters. , f 



6. The method of Claim 5 wherein said smart card comprises a card body 
with a plurality of terminals arranged on a surface of said card body in 
accordance with one of ISO 7816 and PCMCIA card standards. 

7. . A method for managing access to a restricted transmitted event from 
one of a plurality of service providers, said method comprising: 

(a) receiving a plurality of access information messages associated 
with said transmitted event, each of said access information 

.^messages being, encrypted, using a different public key and 
comprising data corresponding to the cost of said transmitted 
event and a descrambling key; 

(b) decrypting one of said access information messages using a 
corresponding pre-stored private key; 

(c) verifying that the cost of said transmitted event is less than a 
pre-stored cash reserve; 

(d) receiving said transmitted event from one of said service 
providers, said transmitted. event being scrambled; and 

(e) descrambling said, transmitted event using said descrambling 
key. . 

8. . The method of Claim 7. further. comprising the step of transferring data 
associated with said purchased transmitted event via a back channel 
connection to said service provider. 
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9. The method of Claim 8 wherein said step of transferring data further 
comprises passing of acknowledgement and negative acknowledgement 
messages. 

10. A method for allowing a digital video apparatus to manage access to a - v 
restricted transmitted event comprises the steps of: 

(a) receiving, from a service provider, access information encrypted 
using a public key, said access information comprising an 
encrypted event key and purchase information v said purchase 
information comprising data corresponding to the cost of said 
transmitted event; - ^:^^^^ s ; ; 

■(b) ; .' : : passing said event key and : purch&se information to a smart 
card coupled to said digital video apparatus; 

(c) deducting the cost of said transmitted event from a cash reserve 
stored in said smart card to determine a calculated cash 
reserve; 

(d) receiving said transmitted event from said service provider, said 
transmitted event being scrambled using said event key; 

(e) passing said transmitted event to said smart card; 

(f) decrypting, in said smart card, said encrypted event key in 
response to having a positive calculated cash reserve; 

(g) descrambling, in said smart card, said transmitted event using 
said decrypted event key; and 

(h) passing saiddescrambied transmitted event to said digital video 
' apparatus. 

1 1 . The method of Claim 10 wherein said digital video apparatus is a 
digital television. 
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12. The method of Claim 10 wherein said digital video apparatus is a set- 
top box. 

13. The method of Claim 10 wherein said cash reserve is downloaded in 
an e-cash certificate message from an automatic teller machine. 

14. A method for allowing a digital video apparatus to manage access to a 
restricted transmitted event comprises the steps of: 

(a) transferring, from a bank, a cash reserve to a smart card; 

(b) receiving, from a service provider, an encrypted event key and 
the cost of said transmitted event; 

(c) passing said encrypted event key and purchase information to a 
smart card coupled to said digital video apparatus; 

(d) verifying that the cost of said transmitted event is less than the 
stored cash reserve and deducting the cost of said transmitted 
/event from said stored cash reserve; 

(e) decrypting, in said smart card, said encrypted event key; 

(f) receiving said transmitted event from said service provider, said 
transmitted event being scrambled using said encrypted event 
key; 

(g) passing said transmitted event to said smart card; 

(h) descrambling, in said smart card, said transmitted event using 
said decrypted event key; and 

(i) passing said descrambled transmitted event to said digital video 
apparatus. 
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15. The method of Claim 14 wherein said step of transferring comprises 
downloading said cash reserve from an automatic teller machine. 

16. A method for managing access to a restricted transmitted package of 
event, said method comprising: 

(a) receiving access information associated with said transmitted 
package of events via a direct channel, said access information being digitally 
signed using a public key and comprising data corresponding to the cost of 
said transmitted package of events; 

(b) verifying the signature on said access information using a 
private key; - t 

(c) verifying that the . cost .of said transmitted package is less than a 
pre-stored cash reserve; 

(d) receiving said one of said transmitted events from said service 
provider, said one of said transmitted events being scrambled; and 

(e) . descrambling said one of said transmitted event using said 
descrambling key. 
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(57) Abstract 

A method for managing access 
to scrambled broadcast or transmitted 
events received from a variety of service 
providers (including broadcast television 
networks, cable television networks 
(50, 52), digital satellite systems). Each 
service provider employs the same 
public key for descrambling the access 
information message thereby permitting 
a user to access events from various 
service providers without changing the 
smart card (42a, 42b). The method may 
also be expanded to manage access to a 
scrambled package of broadcast events. 
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A CONDITIONAL ACCESS SYSTEM FOR BROADCAST DIGITAL 

TELEVISION 

Field of the Invention 

This invention concerns a system that may be employed to 
provide conditional access to multiple broadcasters by a single consumer 
electronic device, such as a set-top box or a digital television. Each device is 
capable of receiving broadcast or transmitted digital streams from a variety of 
broadcast sources. 

Background of the Invention 



Today's NTSC televisions receive broadcast services from a 
15 variety of service providers (see Figure 1). Most television receivers 12 are 
capable of receiving unscrambled * information or programs directly from 
broadcast 22, satellite 26 and cable 24 networks. Traditionally, cable 
networks 24 providing scrambled or encrypted programs usually require a 
separate stand-alone device 16a (e.g., a set-top box) to descramble or 
20 decrypt the program. Similarly, digital satellite systems usually provide 

scrambled or encrypted programs that also require the use of a separate set- 
top box 16b. These set-top boxes may utilize a removable smart card 18a, 
18b which contain the necessary decrypting algorithms and keys. Typically, a 
separate set-top box is required for each service provider. 

In the near future, broadcast digital television services may 
comprise 5 to 20 local channels, each of which may broadcast up to 1 0 
simultaneous programs, some of these programs being pay-per-view 
programs^ A user may want a mix of services from several of the different ; 

30 service providers. For example, a user may want to purchase all of the 

Indiana University basketball games from local channel 4 and purchase all of 
the Notre Dame football games from channel 13 and purchase all of the 
Indianapolis Coits games from channel 8. If each of these services were 
uniquely scrambled, the user would be burdened with purchasing multiple 

35 conditional access smart cards and swapping the cards as the user channel 
surfs. 
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Summary of the Invention 

The present invention resides, in part, in recognition of the 
described problem ahd,' in part, in providing a solution to the problem. A 

5 single conditional access system that is capable of being used with a plurality 
of service providers without changing security modules is provided. Such a 
global conditional access system employs the concept of automatically 
debiting a user's account as a program is purchased versus logging all 
purchases and transmitting the log to the service provider for billing. To 

10 achieve the desired flexibility, the system employs a global public key that is 
used by all of the service providers; this is the public key for every smart card. 
The corresponding private key is loaded into the smart card. It is well within 
the teachings of this application that more than one public/private key pair 
may be used to minimize the impact should security be breached. 

15 : 

' An event or program as described herein comprises one of the 
• following: (1) audid/visual data such as a movie, weekly "television" show or a 
documentary; (2) textual data such as an electronic magazine, paper, or 
weather news; (3) corriputer software; (4)' binary data such as images or (5) 
20 HTML data (e.g., web pages). The service providers include any provider 
broadcasting events, for example, traditional broadcast television networks, 
cable networks, digital satellite networks, providers of electronic list of events, 
such as electronic program guide providers, and in certain cases internet 
service providers. 

25 

: Such a system can be based on public key technology. One 
public key (number) \s available to all service providers. This is the public key 
for every smart card. Each smart card has stored therein a secret private key 
that can decrypt messages encrypted by the public key. The service provider 
30 sends a CA entitlement message in the transmission stream encrypted by the 
public key that contain^ the name of the service provider, the name, time, and 
cost of the program and the key to decrypt the keys used to scramble the 
' program. This message is decrypted by the smart card, and the appropriate 
information is stored In the smart card for each event purchased. The smart 
35 card has a certain amount of credit for purchases that has been enabled by 
' the bank. As long as the limit is not exceeded, programs can be purchased by 
' the viewer. At some appropriate preprogrammed time, the smart card forces a 
telephone call to the CA center. Using another set of public and private keys, 
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the CA center in cooperation with a bank receives billing information from the 
smart card and provides additional credit.. The bank forwards the information 
and credits the appropriate service provider. 

5 Generally, the present invention defines a method for providing 

, conditional access to a restricted broadcast or transmitted event. First 

encrypted access information associated with the broadcast event is received. 

Next the access information is decrypted (or descrambled) and the cost of 

said broadcast event is verified to determine if it is less than a pre-stored cash 
10 reserve. Then the scrambled broadcast event is received from the service 

provider and it is descrambled. 

In accordance with one aspect of the present invention, the 
method for managing access to a restricted broadcast or transmitted event 

15 . from one of a plurality of seryice.providers comprises receiving a plurality of 
access information messages associated .with the transmitted event. Each of 
the access information messages, being scrambled using a different public key 
, and, comprising data corresponding to the cost of the transmitted event. Then, 
decrypting or descrambling one of the access information messages using 

20 the ; pre-stored private key associated with the service provider and verifying 
that the cost of the transmitted event is less than a pre-stored cash reserve. 
Finally, receiving the scrambled transmitted event from one of the service 
providers and descrambling the transmitted event using the descrambling key. 

25 In accordance with another aspect of the present invention the 

method for managing access to a restricted transmitted package of events 
. comprises receiving digitally signed access information associated with the 
package of events via a direct channel and comprising data corresponding to 
the cost of the package, of events. The signature on the acess. information is 

30 verified using a public key; ; the cosf of the package is checked to ensure that it 
is less than a. pre-stored, cash reserve. When any one of the scrambled 
broadcast events belonging to the package is received from the service 
provider, its access information. is decrypted to obtain the descrambling key. 

35 In accordance with yet another aspect of the present invention 

the method for managing access to a restricted transmitted event comprises 
transferring, from a bank, a cash reserve to a smart card; receiving, from a 
service provider, an encrypted event key and the cost of the event; passing 
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- the event key and purchase information to the smart card which is coupled to 
the digital video apparatus. Next, the cost of the event is verified to determine 
that it is less than the stored cash reserve and the cost is deducted. The 
encrypted event key is decrypted and the scrambled event is 
5 received and then passed to the smart card where it is descrambled using the 
decrypted event key. Finally, the descrambled event is transferred to the 
digital video apparatus. 

These and other aspects of the invention will be explained with 
10 reference to a preferred embodiment of the invention shown in the 
accompanying Drawings. 

Brief Description of the Drawing 

15 Figure 1 is a block diagram illustrating a prior art configuration for 

interconnecting consumer electronic devices to a variety of service providers. 

Figure. 2 is a block diagram illustrating one architecture for 
interfacing a common digital television to a plurality of terrestrial broadcasters; 
20 and 

Figure 3 is a block diagram of an exemplary implementation of a 
system for managing access to a device in accordance with the invention. 

25 Detailed Description of the Drawing 

The present invention provides a conditional access system, 
which may be utilized to obtain services from one of a plurality of sources. 
The conditional access system when implemented within a digital television 
30 (DTV), or set-top box or the like, permits a user to receive scrambled events 
from more than one service provider without swapping conditional access 
modules or smart cards. Alternately, the functionality of the smart card may 
be embedded within the DTV. Such a conditional access system may act as a 
toll bridge for access to services thereby permitting a mechanism for the 
35 manufacturer of the DTV to collect fees based on use of its DTV. Similarly, 
this invention may be implemented within a set-top box (STB); for simplicity, 
the below description of the invention will be directed towards an 
implementation using a digital : television and a smart card coupled thereto. 
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In Figure 2, system 30 depicts' the general architecture for 
managing access to a digital television (DW^Oai ^Ob. For simplicity the 
following description will be limited to a Single DTV 40a. Similar element 

5 numbers define the same functional element. Smart Card (SC) 42a is inserted 
into or coupled to a smart card reader (not shown) of DTV 40a; bus 45 
interconnects DTV 40a and SC 42a thereby permitting the transfer of data 
therebetween. Such smart cards include, for example, ISO 7816 cards 
complying with National Renewable Security Standard (NRSS) Part A or 

10 PCMCIA cards complying with NRSS Part B. This inventive concept is not 
limited to smart cards per se, but can be employed with conditional access 
modules. Conceptually, when such a smart card is coupled to a smart card 
reader, the functionality of the smart card may be considered to be a part of 
the functionality of the digital television thus removing the "boundaries" 

15 created by the physical card^oody of the smart card. 

DTV 40a can receive services from a plurality of service 
providers (SPs), such as a broadcast television SPs 50 and 52, a cable 
television (not shown), and a satellite system (not shewn). This invention finds 

20 benefit in terrestrial broadcasting. Certificate authority (CA) 75 is not directly 
connected to either the service providers or DTV 40a but issues digital 
certificates and public and private key pairs, which are used as, explained 
below. It is within the scope of this invention that the role of certificate 
authority 75 may be performed by the service providers in collaboration with 

25 the manufacturer of the DTV 40a. Billing center 70 is utilized to manage the 
user's accounts; updated information is provided as users make arrangements 
to purchase additional services and as these services are consumed or used. 

Such a Conditional Access (GA) system designed for DTV 
30 broadcast technology is a transport-based system. This means that CA 
information for a particular broadcaster is transmitted only on its own RF 
channel. Each broadcaster is responsible for its own information and hence, 
there is no need for pre-established code of conducts to coordinate and/or 
synchronize information among several broadcasters. Further, the CA system 
35 is based on E-cash card loading. A user pre-loads his/her card with a certain 
amount of cash (from debit or credit accounts), and then uses the card to buy 
event packages, pay for monthly subscriptions, or buy specific programs in 
PPV mode. An event package may include, for example, all the games of 
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your favorite professional sports franchise or all the late Sunday movies on 
one or more virtual channels. 



The broadcast channel is used only to deliver the services and 
5 information for access to these services. All the remaining transactions are 
carried out using a return channel (i.e., a modem and a phone connection). 
Broadcasting of addressable messages is not needed. The broadcast 
services are protected using a common scrambling algorithm. The keys used 
in this process and event purchase information are encrypted with a global 
10 public key, and delivered to the user via the MPEG-2 stream. For event 

packages, package certificates are sent to the user, from the CA server 60a, 
via the return channel. As described below in more detail, certificates are 
usually signed to ensure integrity of the certificate. That is, to ensure that the 
proper and unmodified certificate is received from the sender. Services are 
15 accessed through a renewable security "module, i.e., and a smart card. 

Symmetric key cryptography involves the use of the same 
algorithm and key for both encryption and decryption. The foundation of 
public-key cryptography is thfe use of two related keys, one 1 public and one 
20 private. The private key is a secret key and it is computationally unfeasible to 
deduce the private key from the public key, which is publicly available. 
Anyone with a public key can encrypt a message but only the person or 
device having the associated and predetermined private key can decrypt it. 
Similarly, a message can be encrypted by a private key and anyone with 
25 access to the public key can decrypt that message. Encrypting messages 
using a private key may be referred to as "signing" because anyone holding 
the public key can verify that the' message was sent by the party having the 
private key. This may be thought of as being analogous to verifying a 
signature on a document: — 
30 A digitally signed message is a message sent in the clear (i.e., 

: unencrypted) having a signature attached thereto. The attached signature is 
produced by encrypting either the message itself or a digest of the message; a 
digest of the message is obtained by hashing the message. (Hashing 
' involves subjecting the message to a one-way hashing algorithm, such as 
35 MD5 developed by Ron Rivest or SHA-1 developed by the National Institute of 
Standards and Technology (NIST) and the National Security Agency (NSA) 
prior to encrypting the message.) Thus the recipient of the signed message 
can verify the integrity (i.e., the source or origin)of the message. (In 
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comparison, a public key certificate or digital .certificate is a message, 
containing a public key sent in the clear having, a signature attached thereto.) 
Signature verification involves checking the signature by decryption. 

5 As defined above, the five essential components of the CA 

system are the broadcaster, the CA vendor, the billing center (e.g., a bank), 
the end user, and the Certificate Authority. Figure 2 illustrates the overall 
system architecture, and identifies these five components with their 
communication links and data flows. 

10 

The end user communicates with the CA vendor for downloading 
certificates through a point-to-point link such as a telephone line. The 
telephone line is used for automatic transactions and for voice connection 
. when necessary. For automatic transactions, one enabling protocol is the 
15 Point-to- Point Protocol (PPP). Security is. implemented at the application layer 
using private protocols. 

. ;v Communication between the CA vendor and the broadcaster 
. may be established through a Local Area Network (LAN) or Wide Area 
20 Network ;(WAN). As^before, security is embedded at the application level 
using privately-defined protocols running over existing internetworking 
protocols. The broadcast facility equipment needed to protect the broadcast 
streams can be an off-the-shelf product available from multiple CA vendors. 

25 Broadcasters are responsible for delivering: (1 ) the services, and 

(2) the entitlement messages. Such entitlement messages include access 
information (AIM) messages described below in more detail, (or alternatively 
entitlement control messages and entitlement management messages) that 
allow any user to buy those services. Communication between a broadcaster 

30 . and the user therefore follows the point-tc-multipoint model of broadcast 

'technology. Broadcast AIMs do not contain addresses unique to each user or 
, subscriber, which is typical with satellite or cable systems. 

If DTV 40a does not have a back channel connection needed to 
35 communicate with the CA server then loading cash to the card requires the 
user to either access a DTV unit with back-channel support or go to a 
particular location (bank, ATM, vendors regional office) to have the card 
loaded. The CA operators act like the card holder's or user's bank, while the 
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billing center acts like the merchant's bank. The card association could be the 
middleman between the GA operators and the broadcasters' banks that 
provides a transaction settlement sen/ice. The fixed amount of "cash" loaded 
into the smart card 'or conditional access module can now be used to pay of 
5 services offered by a broadcaster. 

Whichever cash transfer mechanism is employed, the user 
requests a transfer of a specific amount of money to the CA card from a credit 
or debit account. After proper verification of the subject's identity and 
10 validation of user resources, the transaction is authorized, and the nominal 
amount of money is stored in the CA card. 

Once money is loaded into the card, a user can buy any number 
of services offered by broadcasters. Each purchase reduces the amount of 
15' available money in the card by the service price. The services offered by 

.■ broadcasters can be classified into two categories; PPV events and packages. 
An event is a TV program with an allocated slot in a program guide and a 
package is simply a collection of events. Examples of packages are (1) all the 
NBA games in a given season, (2) the late Sunday movies on one or more 
20 virtual channels, (3) subscription to a particular virtual channel such as HBO. 
. All events must have one or more of their audiovisual streams scrambled 
using a common symmetric key algorithm. Entitlement packages, which 
contain purchase information and descrambling keys, have to be encrypted 
with a common public-key algorithm. 

Upon purchase of an event, a record may be stored in the smart 
card which may be later transferred to the CA vendor. Once the stored 
purchase information is sent to the CA database, a CA vendor can pay 
broadcasters for the provided services: In addition, each smart card has non- 
30 volatile memory to keep the following information. 

A' 32-bit field represehts : the card serial number. A 128-bit BCD 
field for the user (credit or debit) 'card number. A 1 0-byte field for the CA 
server phone number. A 10-byte field for an alternate CA server phone 
35 number. A 40-bit BCD field to store the amount of money available to the 
user. A field for a signature on the. last E-cash certificate. An 8-bit field to 
store a threshold value to inform the user that the available E-cash is less than 
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a predetermined threshold or to initiate an automatic call back to the CA 
server to add money. A 40-bit BCD fiej^fpf tine amount of money downloaded 
to the card without user involvement when ; E-cash is less than the threshold. 
The amount is determined by the user and sent to the CA server during card 

5 activation. If this value is zero, automatic E-cash download will not be allowed. 
Two 768-bit fields for storing the private key for decrypting the AIMs and for 
storing the public key for verifying the signature on certificates. An 21 -byte 
field for storing the DES key for descrambling the broadcast services. Two 
96-byte fields for storing the key to replace the current private key and for the 

10 key to replace the current verification key. An 8-byte field for storing, the 
symmetric DES key for secure communication with the CA server is also 
provided. It is within the scope of this invention that a scrambling algorithm 
may be a cipher other than DES, 

15 : ■■ The card must store information for PPV events and the 

packages purchased by the user;^lf the .card memory Is full; the user will not 
be allowed' to jpuiGhasefadditional;eventsv 

- ■ r; Data exchange between the card arid the host is based on a 
20 well-defined common interface, i.e., the National Renewable Security 

Standard (NRSS), EIA-679 Part A or Part B. Since the phone line is a widely 
available physical link, the chosen protocol between the CA server and the 
host is the Point-to-Point protocol (PPP), RFC 1548, adopted as Standard 51 
with security provided within PPP datagrams. The technological innovation 
25 described herein does not preclude the use of alternative protocols different 
from PPP on the return channel. 

PPP is a protocol based on the HDLC standards of ISO, as 
adopted by the ITU-T for X.25 systems. It was developed by IETF to transport 
30 datagrams from multiple protocols: over point-to-point links. The frame format 
is a 16 bit protocol field (defined in RFC 1700, "Assigned Numbers"), followed 
by an information field; of; variable length and then followed by a padding field 
containing optional bytes added to adjust the frame length (if required by the 
receiving protocol). 

35 

For exchanging data between the card and the CA server, a new 
protocol is defined, having a protocol field value OxCOFF. The value of the 
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10 

padding field is always zero for this new protocol. The new protocol provides 
reliable transmission using acknowledgment (ACK) and negative 
acknowledgment (NACK) messages which are inserted into the first byte of 
the Information field both messages utilizing an 8-bit uimsbf format. 

An ACK may be followed by information (piggyback 
acknowledgment) sent as a reply. If the receiving end detects a corrupted 
message, it responds with a NACK, and requests retransmission by the 
sender. 



Using the above protocol, the smart card initiates a callback to the 
CA server under any of the following conditions: 

1 . The card has been inserted into the DTV for the first time. 

2. The user has entered a request for an advanced package purchase 
15 using a displayed menu/ ■ ' • ' 

3. Thie smart /card mehibry is full. 

4. The local time is within the interval [1am-6am] and there are new 
records to be sent. 

5. The card has received a notification for a new private key or verification 
20 key. 

6. The smart card money is less than the specified threshold and 
automatic E-cash download is einabled. 

7. The user has entered a request for money using a displayed menu. 

8. The user has entered a request to cancel a package purchase. 

25 Depending on the condition, the card sends an initial alerting message to 
inform the CA server about the user and the purpose of the call. 

When the user inserts the card into the DTV for the first time, the 

information specific to the card is sent to the CA server for registration. This 

30 information is encrypted with Kcallback. 

Card -> CA server: Alert message (with alerttype = 0x01) 

Card <r CA server: ACK message 

Card CA server: -Card. information message 

Card <r CA server: ACK message 



35 



An advanced purchase can be made using a displayed menu. In 
response to the user request, the CA server sends a, package certificate that 
will be saved on the card. For example, 



SUBSTITUTE SHEET (RULE 26) 

BNSDOCID: <WO OOCM717A1 JA> 



WO 00/04717 



PCT/US99/16188 



11 

Card -> CA server: Alert message (with alert jype = 0x02) 

Card <- CA server. ACK message J Signed package certificate message 

Card -> CA server: ACK message 

5 

The Package Certificate format contains the following fields. 
An 8-bit field that indicates a package certificate message. Two values are 
possible, one for renewable package subscription and one for non-renewable 
package subscription. A 32-bit field that identifies the registration authority 

10 that assigns values to the providerjndex field. A 1 6-bit field that identifies the 
content provider. This unique number is registered with the registration 
authority identified by the formatjdentifier. A 1 6-bit field that identifies the 
transport stream where the event is being carried. A 16 bit field that indicates 
the package identifier. An 8-bit field for the title field. A variable length field for 

15 the title of the package using ASCII with.Latin-1 extensions. A 40-bit field 
which indicates the price of the package in BCD format. A 24-bit field which 
indicates the expiration date of the package. 

The PPV event purchase records are temporarily stored in the card 
20 until after the event is broadcast. They are sent to the CA serverwithout user 
involvement and when either 

(i) the card memory is unable to store more records or 

(ii) the local time is in the interval [1am-6am] and there are new records to be 
sent. 

25 , 

All records are encrypted with Kcallback. 
(i) Smart card memory is full 

Card -> CA server: Alert message (with a1ert_type = 0x03) 
30 Card <- CA server: ACK message 

Card -> CA server: A variable number of encrypted PPV event purchase 
records 

Card <r CA server: ACK message 

35 (ii) The local time is within the interval [lam-6am] and there are new records 
to be sent 

Card CA server: Alert message (with alertjype = 0x04) 
Card 4- CA server: ACK message 
40 Card -> C A server: A variable number of encrypted PPV event purchase 

records 



SUBSTITUTE SHEET (RULE 26) 



WO 00/04717 



PCT/US99/16188 



12 

Card <- CA server: ACK message 

When the private key or verification key needs to be replaced, a 

notification is sent to the cards using the broadcast channel. Each user is 

5 then required to initiate a callback to receive the new key. 
Card CA server: Alert message (with alert_type = 0x05) 
Card <r CA server: ACK message I Key replacement message 
Card -> CA server: ACK message 

10 Money is added to the card when; 

1 . the smart card money is less than a specified threshold or 

2. the user enters a request for money using a displayed menu or 

3. the card is taken to a remote location (if there is no local phone 
connection). 

15 In all cases, the entity providing the money verifies the credit or debit card 
information, generates an E-cash Certificate (ECC), and sends it to the card. 
The ECC message format is ah 8-bit field for the message type and 40-bit field 
to hold the BCD 5 Value 'Of the- amount of money to be' added to the smart card. 

20 1 ) Automatic E-cash download is enabled: 

Card CA server: Alert message (with alert_type = 0x06) 

Card <r CA server: ACK message 

Card CA server: Signature on E-cash 

Card <r CA server: ACK | Signed E-cash certificate message 

25 Card -> CA server: ACK message 

2) The E-cash Certificate contains the predefined, fixed amount of E-cash. 
Automatic E-cash ddwnioad is disabled. The'iiser proceeds as follows; 
Card -> CA server: Alert message (with aiert_type = 0x07) 
30 Card <r CA server: ACK message 

Card -> CA server: Signature on E-cash | E-cash amount message 
Card CA server: ACK message ( Signed E-cash certificate message 
Card -> CA server: ACK message ' 

35 ' 1 The user can cancel a purchase by using a menu displayed on 

the screen.' The action taken by the card depends on the type of the 
purchase: 
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(i) Package purchase: A call is initiated to the CA server. 
Card -> CA server: Alert message (with alert_Jype = 0x08) 
Card <r CA server: ACK message 

Card CA server: Canceled package =purchase record 
5 Card <- CA server: ACK message | Signed; E-cash certificate message 
Card -> CA server: ACK message ■ 

(ii) PPV event purchase: If the deadline for canceling the event has not been 
reached, the chosen record is deleted entirely. 

10 

The AIMs are carried as private data in the adaptation field of the 
Transport Stream packets carrying video data. These AIMs could also be 
carried in the Transport Stream with different PIDs using the tools and 
functions available for ECM transmission in MPEG-2. The ,. 
15 adaptation Jteld_controI. bits shall be \1 0* .(Adaptation-field only, no payload) or 
4 1 1 ' (adaptation field followed by payload). The maximum cycle time for AIM 
messages with the same AIM^id shajl Jbe 500 ms. 

The bit-stream syntax for the Access Information Message 
20 contains the following fields. A unique 8-bit identifier of this access 

information message. The AIM_jd field is the second byte in the private data 
section of the adaptation field. The first byte is allocated for identifying the 
public key used in protecting the AIM (if multiple public keys are used in a 
given DMA). An 8-bit field specifying the number of bytes in the AIM 
25 immediately following the AIM Jength field. A 32-bit field that identifies the 
registration authority that assigns values to the provideMndex field. A 16-bit 
field that identifies the content provider. This unique number is registered with 
the registration authority identified by the formatjdentifier. A 24-bit field that 
identifies a particular TV program or event. Assigned by the content provider 
30 identified by provideMndex, it identifies uniquely all those programs registered 
in the content provider data base. A 1 6-bit field that identifies the Transport 
Stream where the event is being carried. A 16-bit field that identifies uniquely 
the particular service where the event is being transmitted. A 14-bit field that 
identifies uniquely, a particular event within a given service of this Transport 
35 Stream. While program„eventJd is a value that identifies an event for a 
content provider, eventjd is the program guide index of an event. A 
broadcaster who acts simultaneously as a content provider may want to have 
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both numbers equal, but this may not be valid otherwise. A 32-bit field 
indicating the event. start time. A 20-bit field indicating the length of the event 
measured in seconds. A 10-byte field for storing the first 10 characters of the 
English title for the event that this message describes. If the actual title has 

5 less than 10 characters, then the title segment must be padded with ESC 
characters before including it in this field. A 5-byte BCD field indicating the 
cost of the event. A 16-bit field that indicates the packages to which this event 
belongs. The most-significant bit corresponds to the first package while the 
least significant bit corresponds to the 1 6-th package. If the event belongs to 

10 the k-th package, then the k-th bit of this field shall be set to one. More than 
; one bit can be set to one to show an event that belongs to multiple packages. 
A 64-bit field for the DES key (or a 168-bit field for the TDES key) necessary 
for de-scrambling the video and audio signals for the event under 
consideration. A 40-bit field indicating that the user needs to obtain a new 

15 , private key or verification key by calling the CA server. If flag is set to 1 , the 
key needs to be replaced until the indicated deadline. . An 8-bit field for 
identifying the total length (in bytes) of the AIM descriptor list that follows. 

■ j In one embodiment of. ; the present invention, entitlement 
20 management messages (ECMs) may be used instead of AlMs. The format of 
the ECM is privately defined according to MPEG-2 and ATSC specifications. A 
particular format that may be used comprises an 8-bit table identification field, 
3 indicator bits, a 12-bit section length field, an 8-bit protocol version field, a 5 
bit version number field, 2 section number fields, a public key field, a transport 
25 stream identification field, major and minor channel number fields, 2 event 
identification fields, a stream PID and descriptors length fields, a cryption 
check field, a stuffing bytes field, and a,32-bit CRC field. 

The security of the system is based on standard and widely 
30 accepted public key and symmetric . key algorithms. The algorithms chosen 
are RSA for. public key encryption and TDES and/or DES for symmetric key 
scrambling. There is a global RSA .public/private key pair, Kpub/Kpri, for the 
entire system. The public key is shared by all the broadcasters and the 
corresponding private key is placed in the tamper-proof NRSS-A based smart 
. 35 cards, distributed by the CA providers to the consumers. This public key is 
used to protect the AIMs generated at the head-end. 
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The AIMs, encrypted under the public key, carry the control 
words (CWs) which are symmetric DESkeys, KDES, used in scrambling the 
audio/video content in the ECB mode. "After decrypting the AIMs with its 
private key, the card obtains the DES keys and descrambles audio/video 
5 streams. At the head-end: Scrambling: E|< 0ES (AA/ stream), Encryption: 
E Kpub (A!M). On the card: Decryption: D K p ri (E Kpub (AIM)), Descrambling: 
D KDES (E KDES (AA/ stream)). 

The security of the system can be improved in a number of 
10 ways. One feasible approach is to use multiple public keys at the head-end 

for encrypting the AIMs. Such use of multiple keys may find benefit in areas of 
overlapping markets, for example, the user can receive terrestrial digital 
broadcast from mere than major market. Another example -would be if the 
receiver population in a given DMA is divided into distinct subsets and each 
15 subset is assigned a different private key, ah attack on one private key would 
not compromise the system. 

For example, encryption at the head-end may involve four keys, 
° 1 EkpubiCAIMJ^EKp^CAlM), E^(AlM)^ E Kpub4 (AIM). Decryption on the card would 
20 then be based on one of the following four keys, Card type 1 : 
D K pni(EK P ubi(AlM)) ( Card type 2: D Kp n 2 (E Kpub2 (AlM)), Card type 3: 
D kpri2 (E Kpub2 (AIM)), and Card type 4: D Kpri4 (E Kpub4 (A!M)). The public key used in 
encrypting the AIM is identified using the identifier in the first byte of the . 
adaptation field. This field indicates the public key used in encrypting the AIM. 
25 If the value is t, the active public key is KpubL 

The E-cash Certificates carry the amount of money to be added 
to the card. The Package Certificates include the price of the package offered 
"to the customer. Since both of the certificates carry sensitive data, there 
30 needs to be a signature mechanism to ensure the integrity of these messages. 
Therefore, a!! certificates are sent via a channel with a feedback path, for 
example, a back channel using a MODEM: 

Although the Package Certificates are normally sent from the CA 
35 server, there may be 'different sources (e.g., ATMs or other special terminals) 
for downloading E-cash to the card. If each source signs with a unique private 
key, the DTV needs to keep multiple public keys. The present CA system 
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employs an ID-based authentication scheme to allow signature verification 
using only one public key. 

As mentioned earlier, to participate in the scrambling, encryption 
5 and signature protocols, the broadcasters, CA servers and the smart cards will 
need to store certain keys. The storage and use of all types of keys are - 
summarized in Figure 3. 

Kpub is kept at the broadcaster site, and is used to encrypt the 
10 DES keys that are locally generated to scramble the AN streams. The card 
has the corresponding Kpri for recovering the DES keys. 

Ksig is used to sign package and E-cash certificates. The 
signed certificates are verified with Kver stored on the card. In the ID-based 
scheme described in Section 8.2, Ksig is unique for each certificate provider 
(CA vendors, ATMs, etc.) but Kver is common to all certificate providers. 

Kcallback is shared between the card and the CA server, and is 
used to encrypt sensitive information exchanged. The information sent from 
the card to the CA server is payment card no, fixed E-cash and event 
purchase records. When needed, Kpri and Kver are replaced by the CA 
server. Kcallback may be unique for each card. Its replacement is only 
possible by sending a new card to the user. 

While the invention has been described in detail with respect to 
numerous embodiments thereof, it will be apparent that upon reading and 
understanding of the foregoing, numerous alterations to the described 
embodiment will occur to those skilled in the art and it is intended to include 
such alterations within the scope of the appended claims. For example, this 
30 invention may be utilized successfully with both digital terrestrial broadcast 
and transmitted satellite digital signals. 
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Claim s 

1 . A. method for managing access id a' restricted transmitted event, said 
method comprising: 

(a) receiving encrypted access information associated with said 
transmitted event, said access information comprising data 
cot-responding to the cost of said transmitted event; 

(b) decrypting said access information; 

(c) verifying that the cost of said transmitted event is less than a 
pre-stored cash reserve; 

(d) receiving said transmitted event from said service provider, said 
transmitted event being scrambled; and ' 

. .(e) u: descrambiing said transmitted event. 

2. The method of Claim 1 wherein said access information further 
comprises an event descrambiing key and purchase information, said 
purchase information comprising channel identification data, event identity 
data, date and time stamp data, and billing data. 

3. The method of Claim 2 further comprising the step of transferring data 
associateid with said purchased transmitted event to said service provider to 
update a user's. account information. 

4. The method of Claim 3 wherein the steps of decrypting, verifying and 
descrambiing are performed in a smart card, said encrypted access 
information being encrypted using a public key and being decrypted using a 
corresponding private key stored in said smart card. 
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5. The method of Claim 4 wherein said public key is shared by all 
broadcasters. 

6. The method of Claim 5 wherein said smart card comprises a card body 
with a plurality of terminals arranged on a surface of said card body in 
accordance with one of ISO 7816 and PCMCIA card standards. 

7. A method for managing access to a restricted transmitted event from 
one of a plurality of service providers, said method comprising: 

(a) receiving a. plurality of access information messages associated 
with said transmitted event, each of said access information 
messages being encrypted using a different public key and 
comprising data corresponding to the cost of said transmitted 
event;and a descrambling key; 

(b) decrypting one of said access information messages using a 
corresponding pre-stored private key; 

(c) verifying that the cost of said transmitted event is less than a 
pre-stored cash reserve; 

(d> receiving said transmitted event from one of said service 

. providers, said transmitted event being scrambled; and 
(e) descrambling said transmitted event using said descrambling 
key. 

* 8. . The method of Claim 7 further comprising the step of transferring data 
associated with said purchased transmitted event via a back channel 
connection to said service provider. 
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9. The method of Claim 8 wherein said'step of transferring data further 
comprises passing of acknowledgement and negative acknowledgement 
messages. 

10. A method for allowing a digital video apparatus to manage access to a 
restricted transmitted event comprises the steps of: 

(a) receiving, from a service provider, access information encrypted 
using a public key, said access information comprising an 
encrypted event key and purchase information, said purchase 
information comprising data corresponding to the cost of said 
transmitted event; - > 

(b) * passing said event key and purchase information to a smart 

card coupled to said digital video apparatus; 

(c) deducting the cost of said transmitted event from a cash reserve 
stored in said smart card to determine a calculated cash 
reserve; 

(d) receiving said transmitted event from said service provider, said 
transmitted event being scrambled using said event key; 

(e) passing said transmitted event to said smart card; 

(f) decrypting, in said smart card, said encrypted event key in 
response to having a positive calculated cash reserve; 

(g) descrambling, in said smart card, said transmitted event using 
said decrypted event key; and 

(h) passing said descrambled transmitted event to said digital video 
apparatus. 

1 1 . The method of Claim 1 0 wherein said digital video apparatus is a 
digital television. 
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12. The method of Claim 10 wherein said digital video apparatus is a set- 
top box. 

13. The method of Claim 10 wherein said cash reserve is downloaded in 
an e-cash certificate message from an automatic teller machine. 

14. A method for allowing a digital video apparatus to manage access to a 
restricted transmitted event comprises the steps of: 

(a) transferring, from a bank, a cash reserve to a smart card; 

(b) receiving, from a service provider, an encrypted event key and 
j ...... the cost, pf 3aid transmitted, event; 

(c) passing said encrypted event key and purchase, information to a 
smart card coupled to said digital video apparatus; 

(d) verifying that the cost of said transmitted event is less than the 
stored cash reserve and deducting the cost of said transmitted 
/event from said stored cash reserve; 

(e) decrypting, in said smart card, said encrypted event key; 

(f) receiving said transmitted event from said service provider, said 
transmitted event being scrambled using said encrypted event 
key; 

(g) passing said transmitted event to said smart card; 

(h) descrambling, in said smart card, said transmitted event using 
said decrypted event key; and 

(i) passing said descrambled transmitted event to said digital video 
apparatus. 
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15. The method of Claim 14 wherein said step of transferring comprises 
downloading said cash reserve from an aUtornatic teller machine. 

16. A method for managing access to a restricted transmitted package of 
event, said method comprising: 

(a) receiving access information associated with said transmitted 
package of events via a direct channel, said access information being digitally 
signed using a public key and comprising data corresponding to the cost of 
said transmitted package of events; 

(b) verifying the signature on said access information using a 
private key; 

(c) verifying that the cost of said transmitted package is less than a 
pre-stored cash reserve; 

(d) receiving said one of said transmitted events from said service 
provider, said one of said transmitted events being scrambled; and 

(e) descrambling said one of said transmitted event using said 
descrambling key. 
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